last executing test programs: 6.759236375s ago: executing program 0 (id=912): process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x92, 0x531, 0x4) socket(0xa, 0x2, 0x0) socket(0x22, 0x3, 0xfd) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) rt_sigsuspend$auto(0x0, 0x8) fcntl$auto_F_SETOWN(r0, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya7\x00', 0xea241, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 6.41305205s ago: executing program 1 (id=913): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 6.224467726s ago: executing program 1 (id=914): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 5.939190518s ago: executing program 3 (id=915): process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x92, 0x531, 0x4) socket(0xa, 0x2, 0x0) socket(0x22, 0x3, 0xfd) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) rt_sigsuspend$auto(0x0, 0x8) fcntl$auto_F_SETOWN(r0, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xea241, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 5.603287566s ago: executing program 2 (id=916): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 5.602450506s ago: executing program 0 (id=924): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 4.992874176s ago: executing program 3 (id=917): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x51) write$auto(r0, 0x0, 0x4000000000) fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x6) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 4.761019017s ago: executing program 1 (id=918): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 4.551215891s ago: executing program 0 (id=919): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 4.04409778s ago: executing program 2 (id=920): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x141a41, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 3.848678672s ago: executing program 3 (id=921): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 3.585872695s ago: executing program 2 (id=922): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40106f52, 0xffffffffffffffff) 3.235741334s ago: executing program 2 (id=923): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 3.157383883s ago: executing program 1 (id=925): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 3.008324398s ago: executing program 0 (id=926): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 1.420516043s ago: executing program 0 (id=927): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 1.420407127s ago: executing program 3 (id=928): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8000, 0x0) r1 = gettid() kill$auto(r1, 0x11) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000140)={"57f475c61457e99f769f5235b668e09caf9941b9b26b2fb80cf70643d6ff9594", 0x3ff, 0x23, 0xc130, 0xd5e9, 0x401, r1}) 1.415802724s ago: executing program 1 (id=935): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 1.361743468s ago: executing program 2 (id=929): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r1, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, 0x0) pwrite64$auto(r1, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 1.092572756s ago: executing program 3 (id=930): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) socket(0x25, 0x1, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x141a41, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 790.569484ms ago: executing program 3 (id=931): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) 203.882671ms ago: executing program 2 (id=932): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x141a41, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 87.340727ms ago: executing program 1 (id=933): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40106f52, 0xffffffffffffffff) 0s ago: executing program 0 (id=934): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x5, 0x8, 0x3, 0x6, 0x6, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x8, 0x0, 0x2f, 0x4f11, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 98.107769][ T5814] cgroup: Unknown subsys name 'net' [ 98.239164][ T5814] cgroup: Unknown subsys name 'cpuset' [ 98.248346][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.102570][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.401758][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.418767][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.426778][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.435315][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.445066][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.455976][ T24] cfg80211: failed to load regulatory.db [ 102.465727][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.473517][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.484808][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.490522][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.502027][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.510041][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.517549][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.525973][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.533622][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.542390][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.551747][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.559039][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.567925][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.588249][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.596421][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.150960][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 103.199695][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 103.306785][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 103.461108][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.468407][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.476695][ T5829] bridge_slave_0: entered allmulticast mode [ 103.484102][ T5829] bridge_slave_0: entered promiscuous mode [ 103.510738][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 103.536679][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.543865][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.551773][ T5829] bridge_slave_1: entered allmulticast mode [ 103.559529][ T5829] bridge_slave_1: entered promiscuous mode [ 103.578765][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.585959][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.593135][ T5834] bridge_slave_0: entered allmulticast mode [ 103.600645][ T5834] bridge_slave_0: entered promiscuous mode [ 103.644857][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.652675][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.660203][ T5834] bridge_slave_1: entered allmulticast mode [ 103.667659][ T5834] bridge_slave_1: entered promiscuous mode [ 103.752044][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.762173][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.769729][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.777904][ T5840] bridge_slave_0: entered allmulticast mode [ 103.785746][ T5840] bridge_slave_0: entered promiscuous mode [ 103.801383][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.813026][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.822626][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.829966][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.837202][ T5840] bridge_slave_1: entered allmulticast mode [ 103.844671][ T5840] bridge_slave_1: entered promiscuous mode [ 103.860259][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.977403][ T5829] team0: Port device team_slave_0 added [ 103.986410][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.996762][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.003922][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.011851][ T5833] bridge_slave_0: entered allmulticast mode [ 104.019273][ T5833] bridge_slave_0: entered promiscuous mode [ 104.029235][ T5834] team0: Port device team_slave_0 added [ 104.037374][ T5829] team0: Port device team_slave_1 added [ 104.046119][ T5834] team0: Port device team_slave_1 added [ 104.055326][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.079274][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.086868][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.094059][ T5833] bridge_slave_1: entered allmulticast mode [ 104.101838][ T5833] bridge_slave_1: entered promiscuous mode [ 104.195127][ T5840] team0: Port device team_slave_0 added [ 104.201974][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.209923][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.236026][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.261579][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.268831][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.295491][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.310505][ T5840] team0: Port device team_slave_1 added [ 104.331432][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.338488][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.365669][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.379604][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.389554][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.397768][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.424051][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.459416][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.477212][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.484330][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.510523][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.523391][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.531295][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.534715][ T5844] Bluetooth: hci1: command tx timeout [ 104.557742][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.604330][ T5844] Bluetooth: hci2: command tx timeout [ 104.610068][ T5844] Bluetooth: hci0: command tx timeout [ 104.632354][ T5833] team0: Port device team_slave_0 added [ 104.682432][ T5833] team0: Port device team_slave_1 added [ 104.694060][ T5834] hsr_slave_0: entered promiscuous mode [ 104.699868][ T5844] Bluetooth: hci3: command tx timeout [ 104.701617][ T5834] hsr_slave_1: entered promiscuous mode [ 104.731035][ T5829] hsr_slave_0: entered promiscuous mode [ 104.737878][ T5829] hsr_slave_1: entered promiscuous mode [ 104.744604][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 104.750538][ T5829] Cannot create hsr debugfs directory [ 104.805479][ T5840] hsr_slave_0: entered promiscuous mode [ 104.812262][ T5840] hsr_slave_1: entered promiscuous mode [ 104.819028][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 104.825970][ T5840] Cannot create hsr debugfs directory [ 104.833579][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.840700][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.867606][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.915873][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.922959][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.949387][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.126484][ T5833] hsr_slave_0: entered promiscuous mode [ 105.133153][ T5833] hsr_slave_1: entered promiscuous mode [ 105.139905][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 105.145907][ T5833] Cannot create hsr debugfs directory [ 105.446989][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.483425][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.495481][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.529933][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.590390][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.610214][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.632434][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.656051][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.711200][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.722557][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.750233][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.761477][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.832111][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.847698][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.871877][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.883336][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.027236][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.090433][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.112118][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.133973][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.141278][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.169553][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.188559][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.195726][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.217527][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.228546][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.235703][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.261884][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.269077][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.288273][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.333810][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.358466][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.365622][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.396528][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.403674][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.427702][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.491517][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.498679][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.538570][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.545823][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.605041][ T5844] Bluetooth: hci1: command tx timeout [ 106.690199][ T5844] Bluetooth: hci2: command tx timeout [ 106.690220][ T5839] Bluetooth: hci0: command tx timeout [ 106.764630][ T5839] Bluetooth: hci3: command tx timeout [ 107.053072][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.071373][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.212054][ T5834] veth0_vlan: entered promiscuous mode [ 107.227981][ T5829] veth0_vlan: entered promiscuous mode [ 107.240572][ T5834] veth1_vlan: entered promiscuous mode [ 107.263671][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.281256][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.292180][ T5829] veth1_vlan: entered promiscuous mode [ 107.352265][ T5834] veth0_macvtap: entered promiscuous mode [ 107.381095][ T5834] veth1_macvtap: entered promiscuous mode [ 107.420809][ T5829] veth0_macvtap: entered promiscuous mode [ 107.439120][ T5840] veth0_vlan: entered promiscuous mode [ 107.451302][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.462873][ T5829] veth1_macvtap: entered promiscuous mode [ 107.487823][ T5840] veth1_vlan: entered promiscuous mode [ 107.499885][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.534028][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.553550][ T5833] veth0_vlan: entered promiscuous mode [ 107.560600][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.570882][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.589151][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.604821][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.633653][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.651907][ T5840] veth0_macvtap: entered promiscuous mode [ 107.660210][ T5833] veth1_vlan: entered promiscuous mode [ 107.683445][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.692477][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.727870][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.736858][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.760634][ T5840] veth1_macvtap: entered promiscuous mode [ 107.819632][ T5833] veth0_macvtap: entered promiscuous mode [ 107.869842][ T5833] veth1_macvtap: entered promiscuous mode [ 107.882316][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.892505][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.919580][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.966406][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.977728][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.996422][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.013062][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.031632][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.036316][ T265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.052509][ T265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.061516][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.080177][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.090740][ T265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.123032][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.140577][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.150777][ T265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.162666][ T265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.181769][ T265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.190779][ T265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.237869][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.253112][ T265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.458538][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.488563][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.558988][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.567902][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.684962][ T5839] Bluetooth: hci1: command tx timeout [ 108.734132][ T5925] mmap: syz.0.1 (5925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.754441][ T265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.762317][ T265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.764416][ T5839] Bluetooth: hci0: command tx timeout [ 108.775147][ T5839] Bluetooth: hci2: command tx timeout [ 108.785182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.844630][ T5844] Bluetooth: hci3: command tx timeout [ 108.971318][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.990394][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.044575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.765018][ T5844] Bluetooth: hci1: command tx timeout [ 110.844806][ T5844] Bluetooth: hci2: command tx timeout [ 110.845443][ T5839] Bluetooth: hci0: command tx timeout [ 110.926247][ T5839] Bluetooth: hci3: command tx timeout [ 111.013067][ T5927] Zero length message leads to an empty skb [ 111.538062][ T5945] zswap: compressor  not available [ 111.787993][ T5941] zswap: compressor  not available [ 111.983874][ T5943] zswap: compressor  not available [ 115.064306][ T5972] zswap: compressor  not available [ 115.386725][ T5968] zswap: compressor  not available [ 115.433199][ T5960] zswap: compressor  not available [ 115.768701][ T5973] zswap: compressor  not available [ 117.110200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.396070][ T6013] zswap: compressor  not available [ 118.750024][ T5996] zswap: compressor  not available [ 119.054515][ T6005] zswap: compressor  not available [ 119.457424][ T6012] zswap: compressor  not available [ 121.320359][ T6034] zswap: compressor  not available [ 121.681504][ T6036] zswap: compressor  not available [ 122.154448][ T6037] zswap: compressor  not available [ 122.450510][ T6042] zswap: compressor  not available [ 124.556978][ T6075] zswap: compressor  not available [ 124.844475][ T6073] zswap: compressor  not available [ 125.255529][ T6074] zswap: compressor  not available [ 125.474633][ T6081] zswap: compressor  not available [ 127.464749][ T6094] zswap: compressor  not available [ 127.778476][ T6096] zswap: compressor  not available [ 128.093196][ T6112] zswap: compressor  not available [ 128.318177][ T6105] zswap: compressor  not available [ 130.002130][ T6127] zswap: compressor  not available [ 131.145982][ T6144] zswap: compressor  not available [ 131.521384][ T6141] zswap: compressor  not available [ 131.762796][ T6147] zswap: compressor  not available [ 133.407301][ T6164] zswap: compressor  not available [ 134.074403][ T6182] zswap: compressor  not available [ 134.452540][ T6183] zswap: compressor  not available [ 134.763833][ T6180] zswap: compressor  not available [ 136.217181][ T6200] zswap: compressor  not available [ 136.896958][ T6205] zswap: compressor  not available [ 137.257731][ T6215] zswap: compressor  not available [ 137.797048][ T6216] zswap: compressor  not available [ 139.075802][ T6232] zswap: compressor  not available [ 140.204523][ T6237] zswap: compressor  not available [ 140.513831][ T6245] zswap: compressor  not available [ 140.829840][ T6250] zswap: compressor  not available [ 142.234459][ T6263] zswap: compressor  not available [ 143.064412][ T6272] zswap: compressor  not available [ 143.410767][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.419827][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.465674][ T6275] zswap: compressor  not available [ 143.640585][ T6281] zswap: compressor  not available [ 144.717932][ T6294] zswap: compressor  not available [ 146.029600][ T6302] zswap: compressor  not available [ 146.415393][ T6309] zswap: compressor  not available [ 146.989842][ T6314] zswap: compressor  not available [ 147.792513][ T6323] zswap: compressor  not available [ 148.994594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.025007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.728690][ T6333] zswap: compressor  not available [ 150.484910][ T6352] zswap: compressor  not available [ 150.741898][ T6351] zswap: compressor  not available [ 150.964517][ T6358] zswap: compressor  not available [ 152.225628][ T6373] zswap: compressor  not available [ 153.173197][ T6384] zswap: compressor  not available [ 153.548319][ T6381] zswap: compressor  not available [ 154.446469][ T6393] zswap: compressor  not available [ 155.330305][ T6402] zswap: compressor  not available [ 156.294528][ T6413] zswap: compressor  not available [ 156.577404][ T6425] zswap: compressor  not available [ 157.416545][ T6424] zswap: compressor  not available [ 158.326798][ T6435] zswap: compressor  not available [ 159.434358][ T6447] zswap: compressor  not available [ 159.864391][ T6448] zswap: compressor  not available [ 160.328887][ T6455] zswap: compressor  not available [ 161.004883][ T6467] zswap: compressor  not available [ 162.376442][ T6481] zswap: compressor  not available [ 162.693588][ T6482] zswap: compressor  not available [ 163.124566][ T6487] zswap: compressor  not available [ 164.004579][ T6499] zswap: compressor  not available [ 165.010929][ T6507] zswap: compressor  not available [ 165.956078][ T6520] zswap: compressor  not available [ 166.142073][ T6516] zswap: compressor  not available [ 166.689907][ T6529] zswap: compressor  not available [ 167.947060][ T6543] zswap: compressor  not available [ 168.364404][ T6550] zswap: compressor  not available [ 169.263767][ T6551] zswap: compressor  not available [ 169.575449][ T6561] zswap: compressor  not available [ 171.084420][ T6594] zswap: compressor  not available [ 171.475115][ T6589] zswap: compressor  not available [ 172.191521][ T6596] zswap: compressor  not available [ 172.462958][ T6592] zswap: compressor  not available [ 173.781603][ T6612] zswap: compressor  not available [ 174.823459][ T6636] zswap: compressor  not available [ 175.205400][ T6626] zswap: compressor  not available [ 175.857625][ T6638] zswap: compressor  not available [ 176.244576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.215312][ T6649] zswap: compressor  not available [ 177.735135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.846197][ T6660] zswap: compressor  not available [ 178.602880][ T6667] zswap: compressor  not available [ 179.954499][ T6694] zswap: compressor  not available [ 180.534431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 181.443039][ T6703] zswap: compressor  not available [ 181.774792][ T6704] zswap: compressor  not available [ 184.195136][ T6735] zswap: compressor  not available [ 184.284346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 184.292667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 185.176015][ T6744] zswap: compressor  not available [ 185.554399][ T6745] zswap: compressor  not available [ 186.744794][ T6767] zswap: compressor  not available [ 187.054397][ T6770] zswap: compressor  not available [ 188.179765][ T6788] zswap: compressor  not available [ 188.590464][ T6789] zswap: compressor  not available [ 190.054403][ T6807] zswap: compressor  not available [ 191.117751][ T6816] zswap: compressor  not available [ 191.558904][ T6825] zswap: compressor  not available [ 192.240394][ T6841] zswap: compressor  not available [ 192.554481][ T6833] zswap: compressor  not available [ 194.327368][ T6856] zswap: compressor  not available [ 194.970338][ T6859] zswap: compressor  not available [ 195.295853][ T6870] zswap: compressor  not available [ 195.997385][ T6881] zswap: compressor  not available [ 196.849681][ T6897] zswap: compressor  not available [ 197.978585][ T6908] zswap: compressor  not available [ 199.162751][ T6924] zswap: compressor  not available [ 199.662404][ T6923] zswap: compressor  not available [ 201.150242][ T6945] zswap: compressor  not available [ 202.330280][ T6966] zswap: compressor  not available [ 202.687899][ T6956] zswap: compressor  not available [ 203.369035][ T6972] zswap: compressor  not available [ 204.847749][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.854271][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.216325][ T7002] zswap: compressor  not available [ 205.972176][ T7013] zswap: compressor  not available [ 206.842337][ T7024] zswap: compressor  not available [ 209.056919][ T7052] zswap: compressor  not available [ 209.938580][ T7072] zswap: compressor  not available [ 210.296745][ T7065] zswap: compressor  not available [ 211.946782][ T7088] zswap: compressor  not available [ 213.740402][ T7105] zswap: compressor  not available [ 214.352378][ T7114] zswap: compressor  not available [ 215.042291][ T7119] zswap: compressor  not available [ 216.061417][ T7129] zswap: compressor  not available [ 216.476796][ T7138] zswap: compressor  not available [ 217.109261][ T7144] zswap: compressor  not available [ 217.744483][ T7154] zswap: compressor  not available [ 218.435610][ T7163] zswap: compressor  not available [ 220.270384][ T7193] zswap: compressor  not available [ 221.581055][ T7205] zswap: compressor  not available [ 221.821371][ T7200] zswap: compressor  not available [ 223.134360][ T7221] zswap: compressor  not available [ 223.914188][ T7227] zswap: compressor  not available [ 224.761414][ T7238] zswap: compressor  not available [ 226.714320][ T7276] zswap: compressor  not available [ 227.127915][ T7279] zswap: compressor  not available [ 227.406607][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 227.412689][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 227.418836][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 227.419263][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 227.616211][ T7274] zswap: compressor  not available [ 230.064332][ T7314] zswap: compressor  not available [ 230.582381][ T7313] zswap: compressor  not available [ 230.686111][ T7315] zswap: compressor  not available [ 231.829851][ T7334] zswap: compressor  not available [ 232.884451][ T7347] zswap: compressor  not available [ 233.040690][ T7357] zswap: compressor  not available [ 235.153606][ T7374] zswap: compressor  not available [ 235.823590][ T7381] zswap: compressor  not available [ 236.327051][ T7387] zswap: compressor  not available [ 237.817279][ T7403] zswap: compressor  not available [ 239.500903][ T7424] zswap: compressor  not available [ 239.721451][ T7428] zswap: compressor  not available [ 240.636170][ T7441] zswap: compressor  not available [ 241.825301][ T7452] zswap: compressor  not available [ 244.516100][ T7488] zswap: compressor  not available [ 245.596996][ T7515] zswap: compressor  not available [ 246.714484][ T7535] zswap: compressor  not available [ 246.942050][ T7541] zswap: compressor  not available [ 247.737691][ T7542] zswap: compressor  not available [ 251.105535][ T7568] zswap: compressor  not available [ 251.745209][ T7589] zswap: compressor  not available [ 253.479102][ T7612] zswap: compressor  not available [ 254.793620][ T7619] zswap: compressor  not available [ 256.281183][ T7639] zswap: compressor  not available [ 258.163083][ T7669] zswap: compressor  not available [ 259.930369][ T7689] zswap: compressor  not available [ 264.066624][ T7738] zswap: compressor  not available [ 266.288225][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.304280][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.401173][ T7776] zswap: compressor  not available [ 268.094834][ T7786] zswap: compressor  not available [ 271.572792][ T7862] zswap: compressor  not available [ 272.218815][ T7866] zswap: compressor  not available [ 272.504442][ T7860] zswap: compressor  not available [ 275.883208][ T7905] zswap: compressor  not available [ 276.734986][ T7919] zswap: compressor  not available [ 277.572512][ T7925] zswap: compressor  not available [ 284.354428][ T8015] zswap: compressor  not available [ 285.471344][ T8036] zswap: compressor  not available [ 286.358884][ T8054] zswap: compressor  not available [ 287.723519][ T8068] zswap: compressor  not available [ 290.180074][ T8098] zswap: compressor  not available [ 290.206076][ T8093] zswap: compressor  not available [ 292.618709][ T8121] zswap: compressor  not available [ 295.582304][ T8166] zswap: compressor  not available [ 298.523892][ T8234] zswap: compressor  not available [ 300.572109][ T8245] zswap: compressor  not available [ 303.935985][ T8299] zswap: compressor  not available [ 306.553348][ T8333] zswap: compressor  not available [ 308.482522][ T8364] zswap: compressor  not available [ 312.498284][ T8405] zswap: compressor  not available [ 314.800342][ T8463] zswap: compressor  not available [ 317.476710][ T8505] zswap: compressor  not available [ 321.208879][ T8552] zswap: compressor  not available [ 324.267735][ T8590] zswap: compressor  not available [ 327.050029][ T8626] zswap: compressor  not available [ 327.748216][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.764573][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.230156][ T8695] zswap: compressor  not available [ 334.806027][ T8721] zswap: compressor  not available [ 336.848463][ T8749] zswap: compressor  not available [ 337.366942][ T8750] zswap: compressor  not available [ 339.949113][ T8801] zswap: compressor  not available [ 342.835368][ T8827] zswap: compressor  not available [ 342.938838][ T8834] zswap: compressor  not available [ 344.277704][ T8843] zswap: compressor  not available [ 350.335554][ T8929] zswap: compressor  not available [ 354.090137][ T8961] zswap: compressor  not available [ 354.561543][ T8987] zswap: compressor  not available [ 356.594844][ T9016] zswap: compressor  not available [ 356.991422][ T9025] zswap: compressor  not available [ 357.587786][ T9030] zswap: compressor  not available [ 362.890425][ T9113] zswap: compressor  not available [ 366.063792][ T9145] zswap: compressor  not available [ 370.181544][ T9217] zswap: compressor  not available [ 372.112608][ T9245] zswap: compressor  not available [ 379.780980][ T9352] zswap: compressor  not available [ 381.117391][ T9364] zswap: compressor  not available [ 385.664801][ T9438] zswap: compressor  not available [ 386.798982][ T9449] zswap: compressor  not available [ 389.172052][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.178740][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.516251][ T9500] zswap: compressor  not available [ 389.683082][ T9476] zswap: compressor  not available [ 391.078706][ T9499] zswap: compressor  not available [ 391.634301][ T9511] zswap: compressor  not available [ 392.050302][ T9523] zswap: compressor  not available [ 394.653609][ T9544] zswap: compressor  not available [ 397.805345][ T9569] zswap: compressor  not available [ 398.647732][ T9594] zswap: compressor  not available [ 400.499073][ T9611] zswap: compressor  not available [ 401.345236][ T9620] zswap: compressor  not available [ 402.784999][ T9633] zswap: compressor  not available [ 405.952539][ T9680] zswap: compressor  not available [ 407.472251][ T9695] zswap: compressor  not available [ 412.153260][ T9753] zswap: compressor  not available [ 418.671677][ T9857] zswap: compressor  not available [ 420.256026][ T9876] zswap: compressor  not available [ 420.934441][ T9886] zswap: compressor  not available [ 426.795664][ T9971] zswap: compressor  not available [ 430.459742][ T9991] zswap: compressor  not available [ 439.780390][T10134] zswap: compressor  not available [ 444.698207][T10221] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 445.201774][T10209] zswap: compressor  not available [ 448.559931][T10248] zswap: compressor  not available [ 450.612771][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.619413][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.214391][T10362] zswap: compressor  not available [ 456.280280][T10386] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 456.370151][T10385] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 458.655619][T10415] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 458.806997][T10420] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 459.152776][T10428] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 460.080239][T10406] zswap: compressor  not available [ 461.024772][T10451] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 461.201524][T10454] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 462.492256][T10471] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 464.751988][T10501] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 465.606174][T10517] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 468.794425][T10537] zswap: compressor  not available [ 469.721111][T10561] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 472.613485][T10609] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 475.473008][T10644] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 477.757021][T10678] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 479.113296][T10696] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 481.362726][T10732] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 489.063275][T10851] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 490.254143][T10871] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 492.141458][T10899] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 493.277597][T10920] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 495.026655][T10946] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 502.989279][T11070] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 506.977750][T11131] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 512.024852][T11217] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 512.049139][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.055588][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.089504][T11268] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 518.343144][T11324] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 518.613796][T11333] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 522.054508][T11392] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 525.462183][T11441] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 530.174644][T11518] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 533.955739][T11580] ================================================================== [ 533.963887][T11580] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 533.971685][T11580] Read of size 8 at addr ffff888029bb0618 by task syz.2.932/11580 [ 533.979519][T11580] [ 533.981885][T11580] CPU: 0 UID: 0 PID: 11580 Comm: syz.2.932 Not tainted syzkaller #0 PREEMPT(full) [ 533.981921][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 533.981943][T11580] Call Trace: [ 533.981952][T11580] [ 533.981962][T11580] dump_stack_lvl+0x116/0x1f0 [ 533.982002][T11580] print_report+0xcd/0x630 [ 533.982037][T11580] ? __virt_addr_valid+0x81/0x610 [ 533.982073][T11580] ? __phys_addr+0xe8/0x180 [ 533.982110][T11580] ? dvb_device_open+0x36a/0x3b0 [ 533.982164][T11580] kasan_report+0xe0/0x110 [ 533.982197][T11580] ? dvb_device_open+0x36a/0x3b0 [ 533.982241][T11580] ? __pfx_dvb_device_open+0x10/0x10 [ 533.982282][T11580] dvb_device_open+0x36a/0x3b0 [ 533.982323][T11580] ? __pfx_dvb_device_open+0x10/0x10 [ 533.982365][T11580] chrdev_open+0x234/0x6a0 [ 533.982395][T11580] ? __pfx_apparmor_file_open+0x10/0x10 [ 533.982451][T11580] ? __pfx_chrdev_open+0x10/0x10 [ 533.982483][T11580] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 533.982517][T11580] do_dentry_open+0x982/0x1530 [ 533.982548][T11580] ? __pfx_chrdev_open+0x10/0x10 [ 533.982583][T11580] vfs_open+0x82/0x3f0 [ 533.982622][T11580] path_openat+0x1de4/0x2cb0 [ 533.982656][T11580] ? __pfx_path_openat+0x10/0x10 [ 533.982689][T11580] do_filp_open+0x20b/0x470 [ 533.982717][T11580] ? __pfx_do_filp_open+0x10/0x10 [ 533.982758][T11580] ? alloc_fd+0x471/0x7d0 [ 533.982793][T11580] do_sys_openat2+0x11b/0x1d0 [ 533.982831][T11580] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.982870][T11580] ? __pfx_do_sys_openat2+0x10/0x10 [ 533.982909][T11580] ? __pfx___might_resched+0x10/0x10 [ 533.982944][T11580] __x64_sys_openat+0x174/0x210 [ 533.982985][T11580] ? __pfx___x64_sys_openat+0x10/0x10 [ 533.983036][T11580] do_syscall_64+0xcd/0xfa0 [ 533.983067][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.983096][T11580] RIP: 0033:0x7fa77518eec9 [ 533.983123][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.983150][T11580] RSP: 002b:00007fa77607c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.983177][T11580] RAX: ffffffffffffffda RBX: 00007fa7753e5fa0 RCX: 00007fa77518eec9 [ 533.983196][T11580] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 533.983213][T11580] RBP: 00007fa775211f91 R08: 0000000000000000 R09: 0000000000000000 [ 533.983230][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.983247][T11580] R13: 00007fa7753e6038 R14: 00007fa7753e5fa0 R15: 00007ffeccc5b108 [ 533.983275][T11580] [ 533.983283][T11580] [ 534.234026][T11580] Allocated by task 1: [ 534.238105][T11580] kasan_save_stack+0x33/0x60 [ 534.242819][T11580] kasan_save_track+0x14/0x30 [ 534.247515][T11580] __kasan_kmalloc+0xaa/0xb0 [ 534.252127][T11580] dvb_register_device+0x1e4/0x2370 [ 534.257356][T11580] dvb_register_frontend+0x5a6/0x880 [ 534.262672][T11580] vidtv_bridge_probe+0x459/0xa90 [ 534.267725][T11580] platform_probe+0x103/0x1d0 [ 534.272447][T11580] really_probe+0x241/0xa90 [ 534.276985][T11580] __driver_probe_device+0x1de/0x440 [ 534.282293][T11580] driver_probe_device+0x4c/0x1b0 [ 534.287339][T11580] __driver_attach+0x283/0x580 [ 534.292158][T11580] bus_for_each_dev+0x13e/0x1d0 [ 534.297040][T11580] bus_add_driver+0x2e9/0x690 [ 534.301760][T11580] driver_register+0x15c/0x4b0 [ 534.306546][T11580] vidtv_bridge_init+0x45/0x80 [ 534.311342][T11580] do_one_initcall+0x120/0x6e0 [ 534.316126][T11580] kernel_init_freeable+0x5c2/0x910 [ 534.321360][T11580] kernel_init+0x1c/0x2b0 [ 534.325721][T11580] ret_from_fork+0x675/0x7d0 [ 534.330437][T11580] ret_from_fork_asm+0x1a/0x30 [ 534.335225][T11580] [ 534.337562][T11580] Freed by task 11565: [ 534.341635][T11580] kasan_save_stack+0x33/0x60 [ 534.346336][T11580] kasan_save_track+0x14/0x30 [ 534.351050][T11580] __kasan_save_free_info+0x3b/0x60 [ 534.356279][T11580] __kasan_slab_free+0x5f/0x80 [ 534.361073][T11580] kfree+0x2b8/0x6d0 [ 534.365004][T11580] dvb_device_put.part.0+0x60/0x90 [ 534.370151][T11580] dvb_device_open+0x2a4/0x3b0 [ 534.374945][T11580] chrdev_open+0x234/0x6a0 [ 534.379383][T11580] do_dentry_open+0x982/0x1530 [ 534.384169][T11580] vfs_open+0x82/0x3f0 [ 534.388290][T11580] path_openat+0x1de4/0x2cb0 [ 534.392901][T11580] do_filp_open+0x20b/0x470 [ 534.397448][T11580] do_sys_openat2+0x11b/0x1d0 [ 534.402178][T11580] __x64_sys_openat+0x174/0x210 [ 534.407060][T11580] do_syscall_64+0xcd/0xfa0 [ 534.411586][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.417500][T11580] [ 534.419835][T11580] The buggy address belongs to the object at ffff888029bb0600 [ 534.419835][T11580] which belongs to the cache kmalloc-256 of size 256 [ 534.434036][T11580] The buggy address is located 24 bytes inside of [ 534.434036][T11580] freed 256-byte region [ffff888029bb0600, ffff888029bb0700) [ 534.447779][T11580] [ 534.450116][T11580] The buggy address belongs to the physical page: [ 534.456564][T11580] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29bb0 [ 534.465364][T11580] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 534.473889][T11580] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 534.481458][T11580] page_type: f5(slab) [ 534.485472][T11580] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000122 0000000000000000 [ 534.494081][T11580] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 534.502694][T11580] head: 00fff00000000040 ffff88813ffa6b40 dead000000000122 0000000000000000 [ 534.511409][T11580] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 534.520099][T11580] head: 00fff00000000001 ffffea0000a6ec01 00000000ffffffff 00000000ffffffff [ 534.528805][T11580] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 534.537496][T11580] page dumped because: kasan: bad access detected [ 534.543928][T11580] page_owner tracks the page as allocated [ 534.549650][T11580] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 26429828792, free_ts 0 [ 534.569391][T11580] post_alloc_hook+0x1c0/0x230 [ 534.574199][T11580] get_page_from_freelist+0x10a3/0x3a30 [ 534.579784][T11580] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 534.585715][T11580] alloc_pages_mpol+0x1fb/0x550 [ 534.590606][T11580] new_slab+0x24a/0x360 [ 534.594793][T11580] ___slab_alloc+0xdc4/0x1ae0 [ 534.599502][T11580] __slab_alloc.constprop.0+0x63/0x110 [ 534.604994][T11580] __kmalloc_cache_noprof+0x477/0x780 [ 534.610401][T11580] bus_add_driver+0x92/0x690 [ 534.615118][T11580] driver_register+0x15c/0x4b0 [ 534.619912][T11580] i2c_register_driver+0xd9/0x1c0 [ 534.624992][T11580] do_one_initcall+0x120/0x6e0 [ 534.629802][T11580] kernel_init_freeable+0x5c2/0x910 [ 534.635058][T11580] kernel_init+0x1c/0x2b0 [ 534.639430][T11580] ret_from_fork+0x675/0x7d0 [ 534.644160][T11580] ret_from_fork_asm+0x1a/0x30 [ 534.648973][T11580] page_owner free stack trace missing [ 534.654369][T11580] [ 534.656709][T11580] Memory state around the buggy address: [ 534.662355][T11580] ffff888029bb0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 534.670444][T11580] ffff888029bb0580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 534.678539][T11580] >ffff888029bb0600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.686632][T11580] ^ [ 534.691497][T11580] ffff888029bb0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.699574][T11580] ffff888029bb0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 534.707649][T11580] ================================================================== [ 534.756485][T11580] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 534.763754][T11580] CPU: 0 UID: 0 PID: 11580 Comm: syz.2.932 Not tainted syzkaller #0 PREEMPT(full) [ 534.773089][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.783188][T11580] Call Trace: [ 534.786500][T11580] [ 534.789466][T11580] dump_stack_lvl+0x3d/0x1f0 [ 534.794112][T11580] vpanic+0x640/0x6f0 [ 534.798164][T11580] panic+0xca/0xd0 [ 534.801948][T11580] ? __pfx_panic+0x10/0x10 [ 534.806520][T11580] ? dvb_device_open+0x36a/0x3b0 [ 534.811524][T11580] ? preempt_schedule_common+0x44/0xc0 [ 534.817040][T11580] ? preempt_schedule_thunk+0x16/0x30 [ 534.822479][T11580] check_panic_on_warn+0xab/0xb0 [ 534.827493][T11580] end_report+0x107/0x170 [ 534.831893][T11580] kasan_report+0xee/0x110 [ 534.836386][T11580] ? dvb_device_open+0x36a/0x3b0 [ 534.841404][T11580] ? __pfx_dvb_device_open+0x10/0x10 [ 534.846766][T11580] dvb_device_open+0x36a/0x3b0 [ 534.851610][T11580] ? __pfx_dvb_device_open+0x10/0x10 [ 534.856979][T11580] chrdev_open+0x234/0x6a0 [ 534.861454][T11580] ? __pfx_apparmor_file_open+0x10/0x10 [ 534.867073][T11580] ? __pfx_chrdev_open+0x10/0x10 [ 534.872082][T11580] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 534.878476][T11580] do_dentry_open+0x982/0x1530 [ 534.883306][T11580] ? __pfx_chrdev_open+0x10/0x10 [ 534.888311][T11580] vfs_open+0x82/0x3f0 [ 534.892458][T11580] path_openat+0x1de4/0x2cb0 [ 534.897114][T11580] ? __pfx_path_openat+0x10/0x10 [ 534.902112][T11580] do_filp_open+0x20b/0x470 [ 534.906676][T11580] ? __pfx_do_filp_open+0x10/0x10 [ 534.911772][T11580] ? alloc_fd+0x471/0x7d0 [ 534.916157][T11580] do_sys_openat2+0x11b/0x1d0 [ 534.920900][T11580] ? __pfx_do_sys_openat2+0x10/0x10 [ 534.926175][T11580] ? __pfx_do_sys_openat2+0x10/0x10 [ 534.931443][T11580] ? __pfx___might_resched+0x10/0x10 [ 534.936794][T11580] __x64_sys_openat+0x174/0x210 [ 534.941720][T11580] ? __pfx___x64_sys_openat+0x10/0x10 [ 534.947180][T11580] do_syscall_64+0xcd/0xfa0 [ 534.951747][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.957706][T11580] RIP: 0033:0x7fa77518eec9 [ 534.962174][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.982372][T11580] RSP: 002b:00007fa77607c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.990843][T11580] RAX: ffffffffffffffda RBX: 00007fa7753e5fa0 RCX: 00007fa77518eec9 [ 534.998866][T11580] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 535.007060][T11580] RBP: 00007fa775211f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.015079][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.023096][T11580] R13: 00007fa7753e6038 R14: 00007fa7753e5fa0 R15: 00007ffeccc5b108 [ 535.031127][T11580] [ 535.034527][T11580] Kernel Offset: disabled [ 535.038876][T11580] Rebooting in 86400 seconds..